,,ib ,union ,calendar ,no4 #ajb #aagth ,,congress #ast ,session ,h4 ,r4 #deac ,report ,no4 #aag-adb ,,in ,,the ,,house ,,of ,,representatives ,july #ai1 #bjba,mr4 ,donalds 7for himself1 ,ms4 ,velzquez1 ,mr4 ,chabot1 and ,ms4 ,houlahan7 introduced the following bill2 which was referred to the ,committee on ,small ,business ,october #ab1 #bjba;,additional sponsor3 ,mr4 ,phillips ,october #ab1 #bjba,reported from the ,committee on ,small ,business2 committed to the ,committee of the ,whole ,house on the ,state of the ,union and ordered to be printed ,a ,,bill ,to amend the ,small ,business ,act to provide for the establishment of an enhanced cybersecurity assistance and protections for small businesses1 and for other purposes4 #a4 ,short title ,this ,act may be cited as the ,small ,business ,advanced ,cybersecurity ,enhancements ,act of #bjba4 #b4 ,enhanced cybersecurity assistance and protections for small businesses ,section #ba7;a7 of the ,small ,business ,act 7#ae ,u4,s4,c4 #fdh7;a77 is amended by adding at the end the following new paragraph3 7#i7 ,small business cybersecurity assistance and protections 7,a7 ,establishment of small business cybersecurity assistance units ,the ,administrator of the ,small ,business ,administration1 in coordination with the ,secretary of ,commerce1 and in consultation with the ,secretary of ,homeland ,security and the ,attorney ,general1 shall establish-- 7i7 in the ,administration1 a central small business cybersecurity assistance unit2 and 7ii7 within each small business development center1 a regional small business cybersecurity assistance unit4 7,b7 ,duties of the central small business cybersecurity assistance unit 7i7 ,in general ,the central small business cybersecurity assistance unit established under subparagraph 7,a77i7 shall serve as the primary interface for small business concerns to receive and share cyber threat indicators and defensive measures with the ,federal ,government4 7ii7 ,use of capability and processes ,the central small business cybersecurity assistance unit shall use the capability and process certified pursuant to section #aje7;c77#b77;,a7 of the ,cybersecurity ,information ,sharing ,act of #bjae 7#f ,u4,s4,c4 #aejd7;c77#b77;,a77 to receive cyber threat indicators or defensive measures from small business concerns4 7iii7 ,application of ,,cisa ,a small business concern that receives or shares cyber threat indicators and defensive measures with the ,federal ,government through the central small business cybersecurity assistance unit established under subparagraph 7,a77i71 or with any appropriate entity pursuant to section #ajc7;c7 of the ,cybersecurity ,information ,sharing ,act of #bjae 7#f ,u4,s4,c4 #aejc7;c771 shall receive the protections and exemptions provided in such ,act and this paragraph4 7,c7 ,relation to ,,nccic 7i7 ,central small business cybersecurity assistance unit ,the central small business cybersecurity assistance unit established under subparagraph 7,a77i7 shall be collocated with the national cybersecurity and communications integration center4 7ii7 ,access to information ,the national cybersecurity and communications integration center shall have access to all cyber threat indicators or defensive measures shared with the central small cybersecurity assistance unit established under subparagraph 7,a77i7 through the use of the capability and process described in subparagraph 7,b77ii74 7,d7 ,cybersecurity assistance for small businesses ,the central small business cybersecurity assistance unit established under subparagraph 7,a77i7 shall-- 7i7 work with each regional small business cybersecurity assistance unit established under subparagraph 7,a77ii7 to provide cybersecurity assistance to small business concerns2 7ii7 leverage resources from the ,administration1 the ,department of ,commerce1 the ,department of ,homeland ,security1 the ,department of ,justice1 the ,department of the ,treasury1 the ,department of ,state1 and any other ,federal department or agency the ,administrator determines appropriate1 in order to help improve the cybersecurity posture of small business concerns2 7iii7 coordinate with the ,department of ,homeland ,security to identify and disseminate information to small business concerns in a form that is accessible and actionable by small business concerns2 7iv7 coordinate with the ,national ,institute of ,standards and ,technology to identify and disseminate information to small business concerns on the most cost-effective methods for implementing elements of the cybersecurity framework of the ,national ,institute of ,standards and ,technology applicable to improving the cybersecurity posture of small business concerns2 7v7 seek input from the ,office of ,advocacy of the ,administration to ensure that any policies or procedures adopted by any department1 agency1 or instrumentality of the ,federal ,government do not unduly add regulatory burdens to small business concerns in a manner that will hamper the improvement of the cybersecurity posture of such small business concerns2 and 7vi7 leverage resources and relationships with representatives and entities involved in the national cybersecurity and communications integration center to publicize the capacity of the ,federal ,government to assist small business concerns in improving cybersecurity practices4 7,e7 ,enhanced cybersecurity protections for small businesses 7i7 ,in general ,notwithstanding any other provision of law1 no cause of action shall lie or be maintained in any court against any small business concern1 and such action shall be promptly dismissed1 if such action is related to or arises out of-- 7,i7 any activity authorized under this paragraph or the ,cybersecurity ,information ,sharing ,act of #bjae 7#f ,u4,s4,c4 #aeja et seq472 or 7,,ii7 any action or inaction in response to any cyber threat indicator1 defensive measure1 or other information shared or received pursuant to this paragraph or the ,cybersecurity ,information ,sharing ,act of #bjae 7#f ,u4,s4,c4 #aeja et seq474 7ii7 ,application ,the exception provided in section #aje7;d77#e77;,d77ii77,i7 of the ,cybersecurity ,information ,sharing ,act of #bjae 7#f ,u4,s4,c4 #aejd7;d77#e77;,d77ii77,i77 shall not apply to any cyber threat indicator or defensive measure shared or received by small business concerns pursuant to this paragraph or the ,cybersecurity ,information ,sharing ,act of #bjae 7#f ,u4,s4,c4 #aeja et seq474 7iii7 ,rule of construction ,nothing in this subparagraph shall be construed to affect the applicability or merits of any defense1 motion1 or argument in any cause of action in a court brought against an entity that is not a small business concern4 7,f7 ,definitions ,in this paragraph3 7i7 ,,cisa definitions ,the terms cyber threat indicator and defensive measure have the meanings given such terms1 respectively1 in section #ajb of the ,cybersecurity ,information ,sharing ,act of #bjae 7#f ,u4,s4,c4 #aeja74 7ii7 ,national cybersecurity and communications integration center ,the term national cybersecurity and communications integration center means the national cybersecurity and communications integration center established under section #bbg of the ,homeland ,security ,act of #bjjb 7#f ,u4,s4,c4 #adh74 4 #c4 ,prohibition on new appropriations 7a7 ,in general ,no additional funds are authorized to be appropriated to carry out this ,act and the amendments made by this ,act4 7b7 ,existing funding ,this ,act and the amendments made by this ,act shall be carried out using amounts made available under section #ba7;a77#d77;,c77viii7 of the ,small ,business ,act 7#ae ,u4,s4,c4 #fdh7;a77#d77viii774 7c7 ,technical and conforming amendment ,section #ba7;a77#d77;,c77viii7 of the ,small ,business ,act 7#ae ,u4,s4,c4#fdh7;a77#d77;,c77viii77 is amended to read as follows3 7viii7 ,limitation 7,i7 ,cybersecurity assistance ,from the funds appropriated pursuant to clause 7vii71 the ,administration shall reserve not less than #a1jjj1jjj in each fiscal year to develop cybersecurity assistance units at small business development centers under paragraph 7#i74 7,,ii7 ,portable assistance 7aa7 ,in general ,any funds appropriated pursuant to clause 7vii7 that are remaining after reserving amounts under subclause 7,i7 may be used for portable assistance for startup and sustainability non-matching grant programs to be conducted by eligible small business development centers in communities that are economically challenged as a result of a business or government facility down sizing or closing1 which has resulted in the loss of jobs or small business instability4 7bb7 ,grant amount and use ,a non-matching grant under this subclause shall not exceed #ajj1jjj1 and shall be used for small business development center personnel expenses and related small business programs and services4 4 ,october #ab1 #bjba;,committed to the ,committee of the ,whole ,house on the ,state of the ,union and ordered to be printed